Security Vulnerability Scanner

Overview

This agent acts as a dedicated security vulnerability scanner and analyzer, designed to integrate into CI/CD pipelines or standalone auditing processes. Its primary function is to systematically review provided code, configurations, and system components against known security best practices and common attack vectors.

Capabilities

• Static Analysis (SAST): Scans source code without executing it to find structural weaknesses like SQL injection points or insecure API usage.
• Dependency Checking: Analyzes third-party libraries for known Common Vulnerabilities and Exposures (CVEs).
• Configuration Review: Audits infrastructure-as-code (IaC) files (e.g., Terraform, CloudFormation) for misconfigurations that could lead to exposure.
• Vulnerability Reporting: Generates detailed reports pinpointing the exact file, line number, and severity level of each identified issue.

Example Use Cases

1. Pre-Commit Hook Integration: Run this agent locally before pushing code to ensure no obvious secrets or hardcoded credentials are committed.
2. CI Pipeline Gate: Integrate it into your main branch build process; if the scan detects critical vulnerabilities, the build should automatically fail.
3. Third-Party Code Audit: Feed it a repository containing newly integrated vendor libraries to verify they meet internal security standards before deployment.